Privacy policy
Current-release policy · Last updated: 7 August 2026
This policy describes the Shrayk app and website as they operate today. Features that are still on the roadmap—including accounts, cloud sync, contributions, scoring, subscriptions, cosmetics scanning, and AI chat—are not active and are not described as if they were. We will update this policy before any of those features begins collecting data.
Shrayk provides general product information. It is not medical, nutritional, or dietary advice.
Who is responsible
The data controller is Shrayk — legal entity details pending publication, at Registered address to be confirmed before publication. Privacy requests can be sent to privacy@shrayk.app. Saudi Arabia’s Personal Data Protection Law (PDPL) is the primary applicable privacy framework. We offer the rights described below to all users.
The legal identity and registered address shown here are deployment settings. They must be completed and reviewed by counsel before this policy is published or used for store submission.
What the current app handles
| Data | Where it comes from | Why it is used | Where it goes | | ---------------------------- | --------------------------------- | ------------------------- | ---------------------------------- | | Scanned barcode number | A barcode you scan | Find a matching product | Sent to Open Food Facts for lookup | | Scan time and product result | Your scans | Show recent history | Stored locally on your device | | Language choice | Your selection or device language | Display Arabic or English | Stored locally on your device |
The current app does not require an account and does not upload scan history to Shrayk servers.
Camera use
The camera is used only to decode supported barcodes on your device. Shrayk does not record video, capture a photo, or transmit a camera feed during ordinary scanning. The current release does not include the planned contribution-photo flow. If that flow is introduced, it will require an explicit action and this policy will be updated before launch.
What we do not collect today
The current release does not collect your name, phone number, precise or approximate location, advertising identifier, contact list, microphone recording, or payment-card details. It has no third-party advertising tracker, and we do not sell personal data.
The marketing website currently uses no analytics or advertising cookies. Essential infrastructure may process basic request data such as IP address, browser type, and security logs to deliver and protect the site.
Third party: Open Food Facts
When you scan, the barcode number is sent to Open Food Facts so its service can return a product record. Open Food Facts operates independently and applies its own privacy terms. Product information can be incomplete or outdated because it comes from manufacturers and community contributors.
No Shrayk account identifier or local history is included in that lookup by the current release.
Storage and retention
Scan history and language settings stay on your device until you clear them in the app or uninstall the app, subject to your device backup settings. Shrayk has no server-side copy of that local history in the current release.
Website infrastructure logs are retained only for operational security and reliability according to the hosting provider’s configured retention. Shrayk has not enabled website analytics.
Your rights
You may ask for access, correction, destruction, objection, or withdrawal of consent where those rights apply under the PDPL. Because current scan history is local, you can remove it directly in the app. You can also use the public deletion page or email privacy@shrayk.app. We aim to respond within 30 days after verifying a request.
Children
Shrayk is not directed to children under 13, and we do not knowingly collect personal data from children.
Security and international processing
We use reasonable technical and organizational safeguards. The current release does not send personal scan history to a Shrayk cloud region. The Open Food Facts lookup may be processed outside Saudi Arabia under that provider’s terms. Future Saudi-hosted cloud features described elsewhere on the roadmap are not active today.
Changes
We will date material changes here and keep the Arabic and English policies equivalent in meaning. Features that change data handling will not be activated before the relevant policy and store disclosures are updated.
Change log: 7 August 2026 — initial current-release policy.
Contact
Privacy: privacy@shrayk.app
Support: support@shrayk.app